$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: +CED9apyM/N02a+zxRBNfORzf1t5uCJ/pJQD+SeZmgo= Subject key identifier: 78:98:D7:BE:E6:2C:FF:73:D0:DD:3A:FE:B5:09:A1:1F:93:A6:87:67 Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 012D Signing time: Sat 31 May 2025 04:13:29 +0000 Manifest this update: Sat 31 May 2025 04:13:28 +0000 Manifest next update: Sat 07 Jun 2025 04:13:28 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: COqBezX2r21vnwytfHkmiL6Pdy5A2v3n++jXRvJ3NFw=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: S9XPQFthPE5Y2c4Zah68ASzF7/aBsexwAKNyaxY/Mbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: May 31 04:13:28 2025 GMT Not After : Jun 7 04:13:28 2025 GMT Subject: CN=683a81e8-9101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:a0:75:86:ea:8b:9f:84:df:91:99:2a:9f: ae:fa:f5:08:06:15:fe:fb:5f:66:02:36:b9:54:99: c8:48:4e:36:fa:00:bb:6f:62:d3:90:6d:d7:22:2e: 5d:72:dd:d2:e6:8c:2f:6b:2d:31:e1:24:0c:ad:c2: f4:46:95:6b:17:b5:42:24:08:ea:f7:79:f3:b5:f3: 4a:3d:e4:0a:44:11:8c:0e:4c:7c:f5:16:62:fb:9b: da:ec:ba:00:e7:39:8a:8b:c6:5c:63:a7:63:e2:54: b5:2b:b2:b7:25:dd:92:11:48:d0:2e:4d:ae:69:37: d2:72:ba:26:77:f3:13:b6:20:b0:ae:c5:50:d3:ab: 0b:64:35:a3:56:4e:56:e5:a9:fd:bc:49:f8:bc:9b: 69:d5:6d:34:5f:39:65:d1:e2:27:57:19:90:52:36: d3:34:47:2d:39:67:ef:28:b0:d4:57:d3:10:91:24: c9:6b:ce:ef:f4:95:da:fb:e8:91:04:6b:78:29:fc: 30:70:81:31:57:66:c6:85:6b:d9:f2:0f:78:8c:0f: dc:62:8f:f2:4f:af:a9:19:5a:c3:dd:95:f8:e3:b5: e1:47:5f:cc:27:07:84:23:f9:15:ac:03:2c:c1:53: 13:a9:01:fa:32:75:4a:26:7a:59:64:ba:4d:ed:ca: e2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:98:D7:BE:E6:2C:FF:73:D0:DD:3A:FE:B5:09:A1:1F:93:A6:87:67 X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:06:ae:a6:9e:40:df:0b:05:4b:63:49:6b:e8:23:05:72:ca: 26:a7:f9:8f:a1:cc:c0:89:07:9e:89:46:c2:d1:a3:41:16:de: 7a:b1:a4:af:78:fd:3b:fc:30:0b:c9:60:f9:f0:47:e9:41:08: b8:05:97:0f:86:51:d2:9c:25:24:38:c2:e2:a1:e0:6f:31:e8: 64:db:36:46:4e:a3:7a:ec:05:21:96:0c:e2:d8:76:77:2a:db: a2:cc:76:6e:c9:b8:b5:34:8a:df:43:26:ed:35:e7:4a:2e:ce: 98:a8:73:e9:3f:6e:29:3c:ee:5a:c2:d0:8e:df:ef:85:a5:e1: 30:81:a6:06:9f:e8:3f:49:64:1a:be:7b:94:69:0c:90:45:ba: 66:c2:25:6e:64:9f:00:63:59:a0:2f:54:ae:79:17:a3:e3:3d: 0e:aa:2b:d1:a8:46:21:36:cc:c0:10:12:47:3d:07:61:54:1e: 1b:04:77:e6:ed:0a:c1:f3:f6:5c:96:cb:33:29:dc:3a:99:40: 99:b5:5e:25:83:58:1b:d0:f7:50:10:57:28:43:b9:26:e7:cf: 23:08:9e:1f:a1:f0:b0:59:3b:f7:c8:fb:0c:ea:62:0b:40:e3: 94:47:b5:31:3a:f6:6e:65:9b:5c:d6:32:71:20:0d:ba:80:9c: 85:d2:d8:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy MTFEOUREMkIwHhcNMjUwNTMxMDQxMzI4WhcNMjUwNjA3MDQxMzI4WjAYMRYwFAYD VQQDEw02ODNhODFlOC05MTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaCgdYbqi5+E35GZKp+u+vUIBhX++19mAja5VJnISE42+gC7b2LTkG3XIi5d ct3S5owvay0x4SQMrcL0RpVrF7VCJAjq93nztfNKPeQKRBGMDkx89RZi+5va7LoA 5zmKi8ZcY6dj4lS1K7K3Jd2SEUjQLk2uaTfScromd/MTtiCwrsVQ06sLZDWjVk5W 5an9vEn4vJtp1W00Xzll0eInVxmQUjbTNEctOWfvKLDUV9MQkSTJa87v9JXa++iR BGt4KfwwcIExV2bGhWvZ8g94jA/cYo/yT6+pGVrD3ZX447XhR1/MJweEI/kVrAMs wVMTqQH6MnVKJnpZZLpN7criSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiY177m LP9z0N06/rUJoR+TpodnMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh QnN5UWZFN1FTOW9oSFozU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXBq6mnkDfCwVLY0lr6CMFcsomp/mPoczAiQeeiUbC0aNBFt56saSv eP07/DALyWD58EfpQQi4BZcPhlHSnCUkOMLioeBvMehk2zZGTqN67AUhlgzi2HZ3 KtuizHZuybi1NIrfQybtNedKLs6YqHPpP24pPO5awtCO3++FpeEwgaYGn+g/SWQa vnuUaQyQRbpmwiVuZJ8AY1mgL1SueRej4z0OqivRqEYhNszAEBJHPQdhVB4bBHfm 7QrB8/ZclsszKdw6mUCZtV4lg1gb0PdQEFcoQ7km588jCJ4fofCwWTv3yPsM6mIL QOOUR7UxOvZuZZtc1jJxIA26gJyF0tg8 -----END CERTIFICATE-----Generated at Sat May 31 17:22:07 2025 by rpki-client